Jordan Liggitt
b8bdcf6441
PodSecurity: update dependencies
2021-06-28 17:46:00 -04:00
Jordan Liggitt
724fbfbb69
PodSecurity: test: generate fixture data
2021-06-28 17:46:00 -04:00
Jordan Liggitt
93c6f8969a
PodSecurity: check: addCapabilities
2021-06-28 17:45:59 -04:00
Jordan Liggitt
3733e209c9
PodSecurity: check: allowPrivilegeEscalation
2021-06-28 17:45:36 -04:00
Jordan Liggitt
a8206ef58b
PodSecurity: check: runAsNonRoot
2021-06-28 17:45:36 -04:00
Jordan Liggitt
12ea930aae
PodSecurity: check: selinux
...
Co-authored-by: Tim Allclair <timallclair@gmail.com>
2021-06-28 17:45:36 -04:00
Jordan Liggitt
42dc070b47
PodSecurity: kube-apiserver integration test
2021-06-28 17:45:36 -04:00
Jordan Liggitt
f39bddd767
PodSecurity: kube-apiserver: admission wiring
2021-06-28 17:45:35 -04:00
Jordan Liggitt
65a42a483c
PodSecurity: pkg/features: feature gate
2021-06-28 17:45:35 -04:00
Tim Allclair
02a6187757
PodSecurity: admission: admission library
...
Co-authored-by: Jordan Liggitt <liggitt@google.com>
2021-06-28 17:45:35 -04:00
Jordan Liggitt
29f5ebf1fe
PodSecurity: test: framework
2021-06-28 17:45:35 -04:00
Tim Allclair
1436d35779
PodSecurity: policy: registry
...
Co-authored-by: Jordan Liggitt <liggitt@google.com>
2021-06-28 17:45:35 -04:00
Jordan Liggitt
5183ea0bf0
PodSecurity: metrics: stub interface
...
Co-authored-by: Tim Allclair <timallclair@gmail.com>
2021-06-28 17:45:35 -04:00
Jordan Liggitt
a3ba921b16
PodSecurity: admission/api: configuration API
...
Admission configuration:
- user, namespace, runtimeclass exemptions
- default policy levels and versions
- defaulting
- load and serialization helpers
Co-authored-by: Tim Allclair <timallclair@gmail.com>
2021-06-28 17:45:34 -04:00
Tim Allclair
9ce17c8773
PodSecurity: api: runtime API
...
Label keys, values, and parsing helper functions
Co-authored-by: Jordan Liggitt <liggitt@google.com>
2021-06-28 17:45:34 -04:00
Kubernetes Prow Robot
51e1969d9c
Merge pull request #103133 from marwanad/allow-scheduler-to-patch-conditions
...
switch scheduler to generate the merge patch on pod status instead of the full pod
2021-06-28 12:46:28 -07:00
Kubernetes Prow Robot
556f8500ff
Merge pull request #102859 from MikeSpreitzer/add-r-metrics
...
Add APF metrics about R(t)
2021-06-28 11:40:28 -07:00
Kubernetes Prow Robot
cd5d3e690e
Merge pull request #103153 from josephburnett/v2beta2
...
Move HPA v2beta2 deprecation to 1.23.
2021-06-28 10:33:25 -07:00
Marwan Ahmed
48dfa2a554
generate scheduler merge patches on the pod status instead of the full pod
2021-06-28 09:35:55 -07:00
Kubernetes Prow Robot
c2882f3142
Merge pull request #103158 from rajaskakodkar/sctp_test
...
Fix "should not mistakenly treat 'protocol: SCTP' as 'protocol: TCP', even if the plugin doesn't support SCTP" test
2021-06-28 07:59:37 -07:00
Kubernetes Prow Robot
5e06f173fb
Merge pull request #98866 from wzshiming/fix/termination_grace_period_seconds_is_negative
...
Fix TerminationGracePeriodSeconds is negative (part 1)
2021-06-28 07:59:25 -07:00
Kubernetes Prow Robot
6010cbe593
Merge pull request #103040 from shu-mutou/sig-ui-leads
...
Add shu-mutou to dashboard approvers
2021-06-28 02:19:49 -07:00
Kubernetes Prow Robot
49ac765b67
Merge pull request #103026 from sanposhiho/fix/typo-on-ExtractHoge
...
Fix typo on ExtractHoge documentation.
2021-06-28 02:19:37 -07:00
Kubernetes Prow Robot
883cacde77
Merge pull request #101413 from songxiao-wang87/run-test6
...
Structured Logging migration: modify policy part logs of kube-controller-manager.
2021-06-28 02:19:25 -07:00
Kubernetes Prow Robot
89675101d0
Merge pull request #103093 from songxiao-wang87/run-test22
...
CHANGELOG: fix punctuation errors in 1.22
2021-06-28 01:11:25 -07:00
Kubernetes Prow Robot
d9ef459918
Merge pull request #103003 from sschne/bugfix/fix-required-pathtype
...
remove omitempty tag from PathType
2021-06-27 23:17:25 -07:00
Shiming Zhang
a8d4cfac93
Allow delete with grace period 1s even if metadata period is negative
2021-06-28 11:49:39 +08:00
Shiming Zhang
45ce2dfacc
Treat negative as 1s in delete path
2021-06-28 11:49:39 +08:00
Shiming Zhang
40593fa4d3
spec.terminationGracePeriodSeconds allow it to be set to 1s if it was previously negative
2021-06-28 11:49:39 +08:00
Kubernetes Prow Robot
657d93c4cc
Merge pull request #103238 from seans3/cmd-headers-beta
...
kubectl command headers as default in beta
2021-06-27 11:17:24 -07:00
Rajas Kakodkar
266ffa8526
bug fix in sctp test
2021-06-27 21:53:41 +05:30
Sean Sullivan
4add8ed910
kubectl command headers as default in beta
2021-06-27 01:12:45 -07:00
Kubernetes Prow Robot
a0f9c8c277
Merge pull request #103001 from zshihang/csi
...
CSIServiceAccountToken ga
2021-06-26 19:31:23 -07:00
Kubernetes Prow Robot
2d1026c664
Merge pull request #103126 from jdnurme/konn-21-update
...
Updated to use konnectivity client v0.0.21, and implemented placehold…
2021-06-26 18:23:23 -07:00
Kubernetes Prow Robot
e974bcd471
Merge pull request #103235 from thejoycekung/debian-setcap-image-bump
...
Update debian, debian-iptables, setcap images to pick up CVE fixes
2021-06-26 16:21:23 -07:00
Joyce Kung
aeccadda4f
Update setcap image to buster-v2.0.3
2021-06-26 15:16:12 -04:00
Kubernetes Prow Robot
df2e13376d
Merge pull request #103169 from Huang-Wei/res-scorer
...
Optimize scheduler res scorer on non-requested extended res
2021-06-26 04:21:23 -07:00
Kubernetes Prow Robot
7ab6c5322c
Merge pull request #103190 from robscott/remove-app-protocol-gate
...
Removing ServiceAppProtocol feature gate
2021-06-26 03:15:23 -07:00
Kubernetes Prow Robot
303f2cef81
Merge pull request #103227 from hakman/fix_affinity-nodeport-timeout
...
nodeport tests: node addresses must match the service IP family
2021-06-26 01:45:23 -07:00
Ciprian Hacman
1721be087d
nodeport tests: node addresses must match the service IP family
2021-06-26 10:00:46 +03:00
Kubernetes Prow Robot
fc26906546
Merge pull request #103049 from gdsoumya/feat/errors
...
Updating github.com/pkg/errors with native go errors pkg
2021-06-25 23:43:23 -07:00
Joyce Kung
0a8a9188c9
Update debian-iptables image to buster-v1.6.5
2021-06-25 20:45:20 -04:00
Kubernetes Prow Robot
f7d2ecdc3e
Merge pull request #96087 from VilledeMontreal/feat/goComp
...
Move all bash custom completions to Go
2021-06-25 17:41:23 -07:00
Joyce Kung
42f9333e7f
Update debian-base image to buster-v1.8.0
2021-06-25 20:38:15 -04:00
Kubernetes Prow Robot
7498c287a6
Merge pull request #103220 from aojea/nit_dual
...
Follow up on fix auto upgraded preferDual-Stack services (in cluster upgrade) #102898
2021-06-25 15:52:47 -07:00
JD Nurme
21fd224ebd
Updated to use konnectivity client v0.0.21, and implemented placeholder context
2021-06-25 22:27:51 +00:00
Antonio Ojea
2eb50ee2fd
fix comment on dual-stack integration test
2021-06-25 23:24:49 +02:00
Antonio Ojea
fa7b5d86e6
remove duplicate validation on services
...
The rest api for services was validating that, on updates, both
the old and new service have the same type. That guarantees that
the type is going to be the same after that, thus we don't need
to validate the service type on the old and the new service.
2021-06-25 23:18:56 +02:00
Kubernetes Prow Robot
017b359770
Merge pull request #103180 from aojea/collect_ipfamily
...
Services tests for NodePorts must match the Node Address and Service IP family
2021-06-25 12:13:32 -07:00
Kubernetes Prow Robot
015a0d9b01
Merge pull request #103130 from ahg-g/ahg-ca
...
Add a function that returns default scheduler configuration
2021-06-25 12:13:24 -07:00